THE p-PART OF TATE-SHAFAREVICH GROUPS OF ELLIPTIC CURVES 

CAN BE ARBITRARILY LARGE 
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Abstract. In this paper it is shown that for every prime p > 5 the dimension of the p-torsion 
in the Tate-Shafarevich group of E/K can be arbitrarily large, where E is an elliptic curve 
defined over a number field K, with [K : Q] bounded by a constant depending only on p. From 
this we deduce that the dimension of the p-torsion in the Tatc-Shafarevich group of j4/Q can be 
arbitrarily large, where A is an abelian variety, with dim A bounded by a constant depending 
only on p. 



1. Introduction 

For the notations used in this introduction we refer to Section [21 

The aim of this paper is to give a proof of 
Theorem 1.1. There is a function g : Z — * Z such that for every prime number p and every 
k G Z>o there exist infinitely many pairs (E,K), with K a number field of degree at most g(p) 
and E/K an elliptic curve, such that 

dim Fp UI(E/K)[p] > k. 

A direct consequence is: 

Corollary 1.2. For every prime number p and every k G Z >0 there exist infinitely many non- 
isomorphic abelian varieties A/Q, with dim. A < g{p) and A is simple over Q, such that 

dim Fp HI(A/Q)[p] > k. 

In fact, a rough estimate using the present proof reveals that g{p) = 0(p 4 ), for p — > oo. 

For p £ {2, 3, 5}, it is known that the group UI(E/Q)[p] can be arbitrarily large. (See B6175 , 
|Cas64| . [FisOlj and |Kr83j .) So we may assume that p > 5, in fact, our proof only uses p > 3. 

The proof is based on combining the strategy used in |Fis01| to prove that dimp 5 III(£ , /Q)[5] 
can be arbitrarily large and the strategy used in KlSc03 to prove that dimF p S P (E/K) can be 
arbitrarily large, where E and K vary, but [K : Q] is bounded by a function depending on p of 
type Q{p). 

In |KlSc03| the strategy was to find a field K, such that [K : Q] is small and a point P e 
Xq(p)(K) such that P reduces to one cusp for many primes p and reduces to the other cusp for 
very few primes p. Then to P we can associate an elliptic curve E/K such that an application of 
a Theorem of Cassels ( |Cas65| ) shows that S P (E/K) gets large. 



The strategy of [FisOlj can be described as follows. Suppose if is a field with class number 1. 
Suppose E/K has a iT-rational point of order p, with p > 3 a prime number. Let tp : E — * E' be 
the isogeny obtained by dividing out the point of order p. Then one can define a matrix M, such 
that the tp-Selmer group is isomorphic to the kernel of multiplication on the left by M, while the 
t/j-Selmer group is isomorphic to the kernel of multiplication on the right by M. One can then 
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show that the rank of E(K) and of E'{K) is bounded by the number of split multiplicative primes 
minus twice the rank of M minus 1. 

Moreover, one can prove that if the matrix M is far from being square, then the dimension 
of the p-Selmer group of one of the two isogenous curves is large. If one has an elliptic curve 
with two rational torsion points of order p and q respectively, one can hope that for one isogeny 
the associated matrix has high rank, while for the other isogeny the matrix is far from being 
square. Fisher uses points on X(5) to find elliptic curves E/Q with two isogenies, one such that 
the associated matrix has large rank, and the other such that the 5-Selmer group is large. 

We generalize this idea to number fields, without the class number 1 condition. To do this we 
express the Selmer group attached to the isogeny as the kernel of the multiplication on the left 
by some matrix M. In general, the matrix for the dual isogeny turns out to be different from the 
transpose of M. 

Remark 1.3. An element of S P (E/K) corresponds to a Galois extension L of K(E[p\) of degree p 
or p 2 , satisfying certain local conditions and such that the Galois group of L / K (E[p\) interacts in 
some prescribed way with the Galois group of K{E[p])/K . The examples of elliptic curves with 
large Selmer and large Tate-Shafarevich groups in [FisOlj , KlSc03 and this paper have one thing 
in common, namely that the representation of the absolute Galois group of K on E[p) is reducible. 
It follows that the conditions on the interaction of the Galois group of K(E[p])/K with the Galois 
group of L/K(E\p\) almost disappear. The next thing to do would be to produce examples of 
large p-Selmer groups, with p > 3, with an irreducible Galois representation on E[p\. One could 
start with the case of elliptic curves with complex multiplication. 

The organization of this paper is as follows: In Section [21 we prove several lower and upper 
bounds for the size of t/?-Selmer groups, where tp is an isogeny with kernel generated by a rational 
point of prime order at least 5. In Section we use the modular curve X(p) and the estimates 
from Section [3 to prove Theorem ll.il 

2. Selmer groups 

Suppose K is a number field, E/K is an elliptic curve and (p : E — > E' is an isogeny defined 
over K. Let E[ip\) be the first cohomology group of the Galois module E[<p]. 

Definition 2.1. The (,5-Selmer group of E/K is 

S V {E/K) :^kerH 1 (K,E[i P }) -> JJ H^K^E). 

p prime 

and the Tate-Shafarevich group of E/K is 

U1(E/K) := kcrH 1 ^^) -► H 1 (K p ,E). 

p prime 

Notation 2.2. For the rest of this section fix a prime number p > 3, a number field K such that 
C P E K and an elliptic curve E/K such that there is a non-trivial point P G E(K) of order p. Let 
tp : E — > E' be the isogeny obtained by dividing out (P). 

To ip we associate three sets of primes. Let Si(ip) be the set of split multiplicative primes, 
not lying above p, such that P is not in the kernel of reduction. Let 5*2 (ip) be the set of split 
multiplicative primes, not lying above p, such that P is in the kernel of reduction. Let Ss(tp) be 
the set of primes above p. 

Suppose S is a finite sets of finite primes. Let 

K(S,p) := {x G K*/K* p \v p (x) = mod p Vp S}. 

Let if 1 (if, M;S) the subgroup of M) of all cocycles not ramified outside S. 

For any cocycle £ G iJ 1 (if, M) denote £ p := res p (£) G i? 1 (if p ,M). Let 8 V be the boundary 
map 

E!{K P )I V {E{K P ))^H 1 {K P ,E[ V ]). 
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Let Ck denote the class group of K. 
Note that S%(f) = S 2 (f) and S 2 (f) = St(<p). 
Proposition 2.3. We have 

S*>(E/K) = {£ G H^EMMriuSafr)) | C P = Vp e S 2 (f) and £ p G 6 p (E'(K p )/f(E(K p ))) Vp G S 3 

Proof. Note that if p divides the Tamagawa number ce,p then the reduction at p is split multi- 
plicative. If this is the case then ce,p/ce',p ^ 1. This combined with dim H 1 (K p , E[f]) < 2 (for 
p \ (p)) and |Sch96l Lemma 3.8] gives that l* : H 1 (K p , E[ip]) — > H 1 (K p ,E) is either injective or 
the zero-map. A closer inspection of |Sch96l Lemma 3.8] combined with KlSc03, Proposition 3] 
shows that i* is injective if and only if p G S 2 (f)- 

The Proposition follows then from jScStOll Proposition 4.6]. □ 

Proposition 2.4. We have 

S*(E/K) c{xe K(S t (f) U S 3 (f),p)\x G K; p Vp G S 2 (f)} 

and 

Sf(E/K) D{xe K(S 1 (f),p)\x g K* p p Vp G S 2 (f) U S 3 (f)}. 

Proof. This follows from the identification E[f] = Z/pZ = /x p , the fact H x (L,n p ) = L*/L* p for 
any field L of characteristic different from p, and Proposition 12. 31 □ 

Definition 2.5. Let Si and S 2 be two disjoint finite sets of finite primes of K, such that none of 
the primes in these sets divides (p). 
Let 

T:K(s 1 , P )^® peS2 o;/o; p 

be the F p -linear map induced by inclusion. 
Let m(Si, S 2 ) be the rank of T. 

In the special case of an isogeny f ; E —* E' with associated sets Si(f) and S 2 (f) as above we 
write m(f) :— m(S\(f), S 2 (f)). 

Note that K does not admit any real embedding. So 

dimK(S,p) = ~[K :Q] + #S + dim Fp C K \p\ 

for any set of finite primes S. 

Proposition 2.6. We have 

#S 1 (f)-#S 2 (f)+dim Fp C K \p]~[K : Q] < dim S*(E/K) < #S 1 (f)+dim Fp C K [p]-m(f) + ^[K : Q]. 
Proof. Using Proposition 12 . 41 twice we obtain 

-~[K : Q] + #5 X ( V ) + dim Fp C K [p] - #S 2 (f) < dim K(S 1 (f),p) - #S 2 (f) - #S 3 (f) 

< dim Sf(E/K) 

< dimK(Si(f) U S 3 (f),p) - m(f) 

< #St(f) + #S 3 (f) + dim Fp C K \p] - m(f) + l[K:Q 



2' 



< #S 1 (f) + dim Fp C K \p]-m(f) + ^[K:Qi]. 

□ 

Lemma 2.7. K^e /iawe 

rankA(A') < #Sx(f) + #S 2 (f) + 2 dimC K [p] + 3[A : Q] - m(<p) - m(<£) - 1. 
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Proof. Note 

1 + mnkE(K) < dim Fp E(K)/pE(K) < dimS p (E/K) < dimS v (E/K) + dim S*{E'/K ) 
< #Si(ip) + #Si{0) + 2 dim Cat [p] + 3 [If : Q] - m(<p) -m(0), 
which proves the Lemma. □ 

By a theorem of Cassels we can compute the difference of dim S V (E/K) and dim S v (E' / K) . 
We do not need the precise difference, but only an estimate, namely 

Lemma 2.8. There is an integer t, with \t\ < 2[K : Q] + 1 such that 

dim S$(E'/K) = dim S 1 ? (E/K) - #5i(y>) + #S 2 (» +t. 

Proof. This follows from |Cas65| and KlSc03 , Proposition 3] . □ 

Lemma 2.9. 

dim (E/K) + dim S*(E'/K) > |#5i(y>) - #S 2 (<p)\ + 2dim Fp C K \p] - 3[K : Q] - 1. 
Proof. We may assume that #Si > #5*2- From Proposition 12.61 we know 

dimS* (E/K) > - #S 2 (<p) + dim Fp C K \p] -±[K:Q]. 

From this inequality and Lemma 12.81 we obtain that 

dim (E'/K) > dim S v (E/K) - 2[K : Q] - 1 - #S X (tp) + #S 2 (tp) > dim Fp C K [p] - | [K : Q] - 1. 

Summing both inequalities gives the Lemma. □ 

Lemma 2.10. Suppose dimS v (E/K) + dimS^(E/'K) = k + 1 and rimkE(K) = r, then 

(k — r) 

max(dimm(E/K)\p],dhnm(E'/K)\p\) > v - ; . 
Proof. This follows from the exact sequence 

- E'(K)[0\/ V (E(K)\p]) - ff»(E/K) - ^(E/tf) - ^(E'/if) -> in^'/X)^]/^^^/^)^]). 
(See jScStmi Lemma 9.1].) □ 

Lemma 2.11. Let tp : E± — > i?2 fre some isogeny obtained by dividing out a K -rational point of 
order p, with E\ an elliptic curve in the K -isogeny network of E. Then 

m&x(dimUl(E/K)[p],dimUl(E'/K)[p}) > - min(#Si(<p), #S 2 (<p))-3[K : Q]-l+-( m (^)+ m (^)). 

Proof. Use Lemma I277I for the isogeny tp to obtain the bound for the rank of E(K). Then combine 
this with Lemma T2.9I and Lemma \'2 . 1 01 and use that 

#Sx(ip) + #S 2 (<p) = #Si(V0 + 

□ 

3. Modular curves 

In this section we prove Theorem 11.11 The following result will be used in the proof of Theo- 
rem ^2 

Theorem 3.1 ( HaRifU Theorem 10.4]). Let f 6 Z[X] 6e a polynomial of degree at least 1. 
Suppose that for every prime t, there exists a y £ Z/^Z such that f(y) ^ mod I. Then there 
exists a constant n depending on the degree of f and the degree of its irreducible factors such that 
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there exist infinitely many primes £, such that f(£) has at most n prime factors. Moreover, there 
exist 5 > 0, d £ Z, such that 



Notation 3.2. Denote X(p)/Q the curve parameterizing triples (E,Q\,Q2) with {Qi,Q2} an 
ordered basis for E[p]. 

By the work of Velu (see |Velu78| . [FisOOl Chapter 4]) there exists cusps of X(jp) defined over 
Q. Fix a cusp T £ X p (Q). Let R\ £ X (p) be the unramified cusp, let R 2 £ X (p) be the 
ramified cusp. 

Let 7Tj : X(p) — > X (p) be the morphisms obtained by mapping (E, Qi, Q 2 ) to (E, (Qi)). 
Let 7Tj : X(p) — ► Xg(p) be either 7^ or 7Tj composed with the Atkin-Lchncr involution on X Q (p), 
such that 7ri(To) = R\. 

Let P £ X(jp) a point, not a cusp. Denote ipp^ the morphism corresponding to tt^P). 

Note that the maps 7Tj are defined over Q. 

Definition 3.3. Let T be a cusp of X{p). We say that T is of type (8, e) £ {1, 2} 2 if 7Ti(T) = R s 
and 7r 2 (T) = R e . 

Note that being of type (S, e) is invariant under the action of the absolute Galois group of Q. 
For all points P £ X(p)(Q) and all primes p \ (p) of Q such that P = T mod p implies that 
p £ Ss(ifips) and p £ S e {ip Pi2 )- 

Proof of Theorem ] Fix a component Y of X(p)/Q(( p ). Fix a (possibly singular) model C\ for 
Y in P 2 , such that the line X = intersects C\ only in cusps of type (1,1) and no other point, all 
^-coordinates of other the cusps are distinct and finite, if two x-coordinates of cusps are conjugate 
under Gal(Q(£ p )/Q), then the type of these cusps coincide and all y-coordinates of the cusps are 
finite. Let C = U creGal (Q(^ p ) / /q)C5 7 . Then C/Q is a model for X(p). 
Denote h the defining polynomial of C . 

Let fs.e £ Z[X] be the radical polynomial with as roots all ^-coordinates of the cusps of 
type (5, e) of X{p) and content 1. After a transformation of the form x h- > cx, we may assume 
that /i, 2 (0)/2,2(0) = 1 and /1, 2/2,2 £ Z[X]. Let n denote the constant of Theorem 13.11 for the 
polynomial /i,a/2, 2- Note that the discriminant of /1, 1/1, 2/2, 1/2, 2 is non-zero. 

Let £> consist of p, all primes £ dividing the leading coefficient or the discriminant of f\. 1/1 ,2/2, 1/2, 2 
all primes £ smaller then the degree of /1, 2/2,2 and all primes dividing the leading coefficient of 
res(h,f 2 ,i,x). 

Let P2 be the set of primes not in B such that every irreducible factor of f2,i{x){x p — 1) mod I 
and every irreducible factor of res{h, / 2i i, x) mod £ has degree 1. Note that by Frobenius' Theorem 
( StLe96 ) the set Vi is infinite. The condition mentioned here, implies that if we take a triple 
(xo,£,Xq) with xq £ Z, the prime I £ V2 divides /2.i(xo) and yo is a zero of h(xo,y) then every 
prime q of Q(( P ,yo) over £ satisfies / '(({/£) = 1. 

Fix 5i and 1S2 two sets of primes, such that 

m(5i,5 2 ) > 2fc + 4(n + 3) deg(/i)(p - 1) + 2, 

Si n S = and S2 C (The existence of such sets follows from Dirichlet's theorem on primes 
in arithmetic progression and the fact that £ £ S 2 implies I = 1 mod p.) 

Lemma 3.4. There exists an Xq £ Z such that 

• xq = mod /or a/Z primes £ smaller then the degree of /i j2 /2,2 cm^ aZ/ I dividing the 
leading coefficient o//i, 2 / 2 ,2- 



#{y € Z I < y < x and the number of prime factors of f(y) < n} < 6 
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• Xq = mod I, for all I G S\ , 

• f2,i{xo) = mod t, for all £ G S 2> 

• /i,2(^o)/2,2(^o) ftfls mos£ n prime divisors. 

• h(xo,y) is irreducible. 

Proof. The existence of such an xq can be proven as follows. Take an a G Z satisfying the 
above three congruence relations. Take b to be the product of all primes mentioned in the above 
congruence relations. Define f(Z) = fi,2(a + bZ)f2,%(fl + bZ). We claim that the content of / is 
one. Suppose I divides this content. Then I divides the leading coefficient of /. From this one 
deduces that £ divides b. We distinguish several cases: 

• If £ G Si then fi^ia) = mod I and I does not divide the discriminant of the product of 
the fg, e , so we have /(0) = f 1,2(0) f 2,2(0) ^ mod I. 

• If £ divides b and is not in Si U S 2 then /(0) = /i, 2 (0)/ 2 , 2 (0) = 1 mod t. 

So for all primes £ dividing b we have that / ^ mod I. This proves the claim on the content of 
f- 

Suppose I is a prime smaller then the degree of /, then /(0) = 1 mod £. If £ is different from 
these primes, then there is a coefficient of / which is not divisible by I and the degree of / is 
smaller then £. So for every prime £ there is an zi G Z with f(zg) ^ mod I. From this we deduce 
that we can apply Theorem 13. II The constant for / depends only on the degree of the irreducible 
factors of /, hence equals n. The set 

{xi G Z I f(xi) has at most n prime divisors} 

is not a thin set. So 

H. := {xi £ Z I f(xi) has at most n prime divisors and h(a + bxi, y) is irreducible} 

is not empty by Hilbert's Irreducibility Theorem |Ser89l Chapter 9].) Fix such an xi £ H. Let 
xq — a + bxi. This proves the claim on the existence of such an xq. □ 

Fix an xq satisfying the conditions of Lemma 1^.41 Adjoin a root yo of h(xo, y) to Q(Cp)- Denote 
the field Q(Cp,2/o) by K\. Let P be the point on X(p)(Ki) corresponding to (xo,yo). Let E/Ki 
be the elliptic curve corresponding to P. Let K = Ki(-J '04(E)). Then if q is a prime such that 
E/Kq has multiplicative reduction, then E/K q has split multiplicative reduction. 

For every prime p of K over £ £ Si we have that P mod q is a cusp of type (1,1). Over 
every prime £ G S 2 there exists a prime q such that P mod q is a cusp of type (2, 1). From our 
assumptions on xq it follows that p does not divide f(q/£). Let Ti consists of the primes of K 
lying over the primes in Si . Let T2 be the set of primes q such that q lies over a prime in S 2 and 
P mod q is a cusp of type (2, 1). 

Note that the set of primes of K such that P reduces to a cusp of type (*,2) has at most 
n[K : Q] elements. 

We have the following diagram 

Q(S 1;P ) -> ©, eS2 Z|/Zf 

I I 
K(T u p) (B qeT2 0* Kq /0*l. 

Since p\ f(c\/£) for all £ G S 2 , the arrow in the right column is injective. This implies 

m(<p P ,i/K) > m(Ti,T 2 ) > m(Si,S 2 ) = 2k + 4(n + 3) deg(h)(p - 1) + 2. 
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Since S 2 ((p p ^/K) < [K : Q]n and [K : Q] < 2(p — 1) deg(h) we obtain by Lemma 12. Ill that for 
some E 1 isogenous to E we have 

dim Fp W(E'/K) [ P ] > -#S 2 (<Pp, 2 ) -3[K:Q] -l + ~ro(Si,S 2 ) 

> (n + 3)[K :Q)-l + -m(Si,S 2 ) = k. 

Note that deg(h) can be bounded by a function of type 0(p 3 ), hence [K : Q] can be bounded 
by a function of type 0(p 4 ). □ 

To finish, we prove Corollarv ll.2l 

Proof of Corollary \1.2L Let E/K be an elliptic curve such that dim III (E/K)[p\ > kg(p) and 
[K:Q]<g(p). 

Let R :— Rcs k /q(E) be the Weil restriction of scalars of E. Then by |Mi72l Proof of Theorem 

1] 

dimIII(i?/Q)[p] = dimUI(E/K)\p\. 
From this it follows that there is a factor A of R, with dimIII(A/Q)[p] > k. □ 
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